Thomas Egerer
59965aaf96
pluto: Securely wipe quick mode keys from memory.
...
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
2011-05-10 15:39:00 +02:00
Thomas Egerer
9e6bb93ab9
pluto: Securely wipe sensitive data from memory.
2011-05-10 15:19:46 +02:00
Andreas Steffen
261d5f22db
terminate imc/imv that couldn't be initialized properly
2011-05-10 07:03:50 +02:00
Andreas Steffen
bb6b2fbb81
lock the set_message_types() method for imvs
2011-05-09 16:46:08 +02:00
Andreas Steffen
375ac27609
cosmetics
2011-05-09 16:46:08 +02:00
Martin Willi
f7812f6492
Wipe memory after using key material (incomplete, to be continued)
2011-05-09 14:36:15 +02:00
Martin Willi
7dc48bab1b
Use memwipe() in chunk_clear()
2011-05-09 14:36:14 +02:00
Martin Willi
ed678b52e2
Added a memwipe() function to safely overwrite sensitive memory
2011-05-09 14:36:14 +02:00
Andreas Steffen
52cab8874b
fixed debug output
2011-05-09 00:49:59 +02:00
Andreas Steffen
d6eec513f1
adapted state_machine for retry batches
2011-05-09 00:49:36 +02:00
Andreas Steffen
82b43847f5
version bump to 4.5.2rc2
2011-05-08 17:56:05 +02:00
Andreas Steffen
ff30e06bf0
lock the set_message_types() method
2011-05-07 17:51:53 +02:00
Andreas Steffen
2c3464af46
added missing comma
2011-05-07 10:22:57 +02:00
Andreas Steffen
50a43c79a6
refactored tnccs->remove_connection()
2011-05-06 15:13:05 +02:00
Andreas Steffen
51f259a82d
id of non-registered threads defaults to 0
2011-05-06 06:22:19 +02:00
Martin Willi
e7643c92d3
Migrated scheduler_t to INIT/METHOD macros
2011-05-05 11:14:51 +02:00
Martin Willi
cda46be72a
Migrated callback_job to INIT/METHOD macros
2011-05-05 11:14:51 +02:00
Martin Willi
3316742969
Migrated processor to INIT/METHOD macros
2011-05-05 11:14:50 +02:00
Tobias Brunner
5832d5058b
Typo in NEWS fixed.
2011-05-05 10:31:33 +02:00
Tobias Brunner
bf3c371531
Note about certificates added to CA section in ipsec.conf man page.
2011-05-05 10:30:51 +02:00
Tobias Brunner
a855af9544
testing: Properly align numbers of succeeded and failed tests in overview page.
2011-05-05 10:29:52 +02:00
Tobias Brunner
e296fc2d26
testing: Add crumbtrail to overview page which lists all tests.
2011-05-05 10:29:52 +02:00
Tobias Brunner
ca25eb9eb3
testing: Directly link to index.html of tests to allow browsing via file://.
2011-05-05 10:29:52 +02:00
Tobias Brunner
e8ae55f64b
testing: Avoid adding additional spacing around testresults.
2011-05-05 10:29:52 +02:00
Tobias Brunner
074919dcc5
testing: Replace back link in results with crumbtrail to improve navigation.
2011-05-05 10:29:51 +02:00
Martin Willi
92ebb7c5b2
Added NEWS about duplicheck and coupling plugins
2011-05-05 09:38:48 +02:00
Martin Willi
e35727c14d
Fix algorithm type for signers, fixes warning with gcc 4.5
2011-05-03 11:33:40 +02:00
Tobias Brunner
b4c9ab9c79
Cache group name in sys_logger_t to avoid problems with Vstr.
...
Because syslog(3) is not replaced when using the Vstr wrapper, %N can
not be resolved properly.
2011-05-03 10:50:28 +02:00
Tobias Brunner
b7cb8100c4
Migrated sys_logger_t to INIT/METHOD macros.
2011-05-03 10:21:58 +02:00
Tobias Brunner
5bbe0ee18c
Migrated file_logger_t to INIT/METHOD macros.
2011-05-03 10:21:03 +02:00
Andreas Steffen
b58e9783d7
version bump to 4.5.2rc1
2011-05-02 22:15:43 +02:00
Tobias Brunner
7b12521679
Removed superfluous parameter missed in e5e5bcc92f.
2011-05-02 17:13:14 +02:00
Martin Willi
aca6434ba9
Fix a potential memleak if two threads fingerprint a credential simultaneously
2011-05-02 15:05:41 +02:00
Martin Willi
33bad71ce9
Accept name fields in EAP-MD5 messages
2011-05-02 09:57:58 +02:00
Andreas Steffen
ca0341bf85
added missing tab
2011-04-28 13:30:40 +02:00
Andreas Steffen
083fe967e5
adapted debug output
2011-04-28 13:28:40 +02:00
Andreas Steffen
02472e3417
do not send messages of type TNC_VENDORID_ANY or subtye TNC_SUBTYPE_ANY
2011-04-28 13:28:40 +02:00
Tobias Brunner
68447302d6
Typo fixed.
2011-04-28 12:50:30 +02:00
Andreas Steffen
7d39f3e1b9
log unsupported IMC_IMV message types
2011-04-28 02:27:08 +02:00
Andreas Steffen
e7f21e33b1
list registered TNCCS message types
2011-04-28 01:35:45 +02:00
Tobias Brunner
67ec2be665
IKEv2 was only partially the default for connections with auto=route and auto=start.
...
Connections with auto=route and auto=start that did not have
keyexchange=ikev2 explicitly specified did get added to charon,
but did not get routed or started by charon.
2011-04-27 11:33:06 +02:00
Tobias Brunner
cce8f65232
Fixed two typos in kernel-pfroute plugin.
2011-04-26 17:58:39 +02:00
Andreas Steffen
8af1e3606b
fixed loop error in parsing of OCSP basic responses
2011-04-26 12:32:19 +02:00
Andreas Steffen
6ab1a83059
Migrated eap_sim_file to INIT/METHOD macros
2011-04-22 11:30:42 +02:00
Andreas Steffen
406051ea4e
fixed segmentation fault due to null pointer
2011-04-22 10:11:16 +02:00
Andreas Steffen
4b06f9f265
debug type is EAP_TLS
2011-04-21 21:04:11 +02:00
Andreas Steffen
2778b6644b
do not include length field in non-fragmented EAP-PEAP packets
2011-04-21 19:52:49 +02:00
Andreas Steffen
c223ccd174
Win 7 accepts compressed EAP Identity request
2011-04-21 19:52:49 +02:00
Andreas Steffen
20c428b670
added level 3 debug output of forwarded EAP payloads
2011-04-21 19:52:49 +02:00
Martin Willi
f9a552f011
Resolve and connect to RADIUS servers not before required
2011-04-21 14:01:25 +02:00
Thomas Egerer